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The Law Office of Ethan Mora 
Ethan E. Mora (SBN 317937) 
1040 E. Herndon Ave., Suite 105 
Fresno, CA 93720 

Telephone: (559) 370-1485 


Attorney for Plaintiff 
RYAN DELLONE 


THE UNITED STATES DISTRICT COURT 
FOR THE EASTERN DISTRICT OF CALIFORNIA 


RYAN DELLONE, an individual, Case no. 1:23-CV-01408-ADA-HBK 


Plaintiff, 


= DECLARATION OF ETHAN E. 

MORA IN SUPPORT OF 

COINBASE, INC., COINBASE GLOBAL, INC.|  pLAINTIFF’S MOTION FOR 

and DOES 1-50; and 2.05698427 BITCOINS, Ae eR i NSS 
Defendants. DEFENDANT 2.05 BITCOINS 


I, Ethan E. Mora, declare as follows: 

1. I am an attorney at law duly licensed and admitted to practice before the United 
States District Court, Eastern District of California. I am the attorney of record for Plaintiff, Ryan 
Dellone (“Mr. Dellone”’) in this action. I have personal knowledge of the following facts, and if 
called as a witness, I could and would testify competently thereto. 

2 I have been investigating cybercrimes and assisting victims of cryptocurrency theft 
and data breaches since 2018. To that extent, I am familiar with some of the cryptocurrency tracing 
and Open-Source Intelligence techniques and tools used by private entities and law enforcement 
agencies, and I am aware of significant limitations regarding processes for recovering stolen 
cryptocurrencies, as well as several substantial barriers faced by victims of cybercrimes seeking 


to effectively pursue recourse and obtain justice. 
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3, In January 2022, Mr. Dellone retained my office (The Law Office of Ethan Mora) 
to assist with the investigation of the alleged theft of his cryptocurrencies. 

4. On January 6, 2022, I filed a report on behalf of Mr. Dellone, with the Federal 
Bureau of Investigation’s Internet Crime Complaint Center (“IC3”), on the IC3 website. 

oF On January 17, 2022, I filed a police report on behalf of Mr. Dellone, with the 
Fresno Police Department, using the Fresno PD’s coplogic platform. 

6. On January 19, 2022, I met with Detective Timothy Johnson of the Fresno PD, in 
person, at his office. He informed me that he is one of two detectives assigned to the Fresno PD’s 
Financial Crimes unit, and the other detective focuses primarily on elder abuse cases. 

7. In or around May 2022, Mr. Dellone retained the law firm of Bennett & Demera 
LLP to assist him in prospective litigation concerning the theft of his property; and in or around 
September 2022, Mr. Dellone terminated his relationship with that firm. 

8. Between January 2022 and April 2023, I identified the bcl Wallet 
(bel qjp79ak6fxm4h7j0tsrwqx2n2k4tcqqveqxrvgm) as the location of Mr. Dellone’s stolen assets, 
and my office began monitoring the bcI Wallet address. During that time, my office provided Mr. 
Dellone with legal services, which included investigating the alleged theft, corresponding with law 
enforcement officials and parties involved, and sending demand letters. Using online blockchain 
explorers (e.g., Blockchair.com), I determined that the bitcoins in the bcI Wallet are traceable 
from these (and potentially other) addresses: bclqwp62svuvwsdeSrv573h8uu0csjuewzup6dvelj; 
bel qmfpphyfc38xf8ytmk8aeyr4sw701r767tlzmqr; 3DcopM3iaoL2siD3BgGpGoENFwaSanJoKj. 

9: In April 2023, Mr. Dellone retained my office to represent him as his litigation 
counsel in the instant litigation. 

10... In May 2023, I sent multiple emails to Matt Turetsky, the in-house “Director, 
Associate General Counsel, Litigation” for the Coinbase Defendants, requesting information about 
the bel Wallet, including whether the Coinbase Defendants control that wallet. Mr. Turetsky never 
provided that information. 

11. In June 2023, I learned that Mr. Dellone had received a “Victim Notification 


System” letter, dated June 29, 2023, from the Department of Justice for the District of New Jersey, 
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which stated that Mr. Dellone had been identified as a victim or potential victim in the criminal 
matter, USA v. Katz, Dkt. No. 21-10413 (filed December 9, 2022, D. N.J.). I began monitoring the 
Katz case on PACER. 

12. Between June 2023 and August 2023, I called the U.S. Attorneys Office for the 
District of New Jersey over twenty times, seeking information about the Kaiz case, and attempting 
to make contact with the relevant prosecutors. I was informed by a DOJ “victim witness 
professional” that a plea hearing was scheduled to take place in the Katz case in August 2023. 

13. According to PACER, the last docket entry in the Katz matter is a continuation, to 
May 2023, of a plea hearing scheduled for February 2022. 

14. ‘In or around September 2023, I made contact with the DOJ’s Cybercrime Unit 
Chief for the U.S. Attorney’s Office in Newark, Assistant U.S. Attorney (AUSA) Anthony 
Tontore, and with the lead prosecutor in the Katz case, AUSA Sophie Reiter. AUSA Tontore 
informed me that the Victim Notification System letter Mr. Dellone had received on June 29, 2023 
was sent erroneously, and that Mr. Dellone is not a victim or potential victim in the Katz case. 
AUSA Reiter has informed me that the criminal matter in which Mr. Dellone is a victim is subject 
to a grand jury investigation, and she has been unable to confirm whether the DOJ has information 
about or custody of the bcI Wallet. 

15. On September 13, 2023, I used the ILaaw Wallet 
(1LaawSa4icoazeiC225ji2ewAHipehs6z4) to send sent an OP_ RETURN transaction to the bel 
Wallet, with the following message included: “R.D.”. (Transaction hash: 
9bdf7f4fe8820f7ca33 f0a6b 1 2e4a2b9c0403a52a2266bf13a67 1aa5070d3d3a). 

16. On September 14, 2023, I informed AUSA Reiter via email that I had sent the 
OP_RETURN transaction with my client’s initials to the beZ Wallet. 

17. On October 10, 2023, Adam Vukovic, of the law firm, Bryan Cave Leighton 
Paisner LLP, informed me via email that his clients, Coinbase, Inc. and Coinbase Global, Inc., do 
not control the bel Wallet. 

18. On October 14, 2023, I created an online drive folder, and I uploaded the Summons, 


Civil Cover Sheet, and the Complaint including Exhibits A, B, and C thereto (collectively, the 
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“Service Documents”) to the folder; I also created a shortform hyperlink, directing to electronic 
version copies of the Service Documents; and I used the 1Laaw Wallet to send two OP_RETURN 
transactions to the bcl Wallet. The first transaction reads: “OSERVICE - SUMMONS, 
COMPLAINT U.S. Dist. E.D. Cal. LINK: t.ly/123cv01408 service.” (Transaction hash: 
235e97b6ed65 1561 eb8e690bd6cec45f7d383027c2bIl ccflababd68913dacl4f). The — second 
transaction reads: “#039;LAWSUIT _https://t.ly/123cv01408 service.” (Transaction hash: 
3f6d743409afbfd1da359ed94c1a70dab01791f1c21a7aa7de5c6b0843e6df78). 

19. On October 14, 2023, I hand-delivered completed copies of USM-285 forms to the 
U.S. Marshals, at the following address, 2500 Tulare Street, 3501, Fresno, California, 93721. The 
completed USM forms provide instructions for serving the Bitcoin Defendant via OP_RETURN 
transaction-messages sent to the Bitcoin wallet addresses provided in the Motion filed herewith, 
and in Paragraph 8 of this Declaration. 

20. Around 4:00 pm PST on October 17, 2023, I spoke with Adam Vukovic via 
telephone. He confirmed his clients (the Coinbase Defendants) do not control the beI Wallet’s 
private key, and that the Coinbase Defendants may be unable, or unwilling to provide information 
concerning the Bitcoin Defendant. I informed Mr. Vukovic of my intent to file a motion for 
alternative service, and he confirmed that he would accept service of the documents electronically, 
via email, on behalf of Coinbase. 

21. Despite my best efforts, I have not been able to identify any physical addresses or 
personally identifiable information associated with the Bitcoin Defendant. 

22. At the time of filing this Declaration, the bc Wallet has not been involved in any 
transactions since December 14, 2021, apart from than the transactions I sent. 

I declare under penalty of perjury under the laws of the State of California that the 


foregoing is true and correct. 


DATED: October 18, 2023 By; /s/ Ethan E. Mora 


Ethan E. Mora 
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